CVE-2023-28297

CVE-2023-28297 is a Windows RPCSS Elevation of Privilege vulnerability. The consolidated records identify the affected component as the Windows Remote Procedure Call Service (RPCSS) with a high-severity CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and a base score of 8.8. The explicit ro...

CVE-2025-21174

CVE-2025-21174 affects the Windows Standards-Based Storage Management Service. The vulnerability is a denial-of-service caused by uncontrolled resource consumption that an attacker can trigger over a network, with CVSS 3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base score 7.5, HIGH). ...

CVE-2025-21377

Technical details for CVE-2025-21377 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates in the connected feeds.

CVE-2026-42970

CVE-2026-42970 involves Windows Push Notifications and is caused by the use of an uninitialized resource , enabling an authorized attacker to locally disclose information. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) yields a base score of 5.5 (Medium) with high confidentiality impac...

CVE-2018-0742

Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates from trusted sources.

CVE-2022-30203

Technical details about CVE-2022-30203 are not publicly provided in the supplied documents. The connected records reference Windows Boot Manager security bypass but do not disclose affected products, root cause, impact, or remediation. Monitor for official updates.

CVE-2023-28302

Technical details for CVE-2023-28302 are not publicly available in the provided documents. Monitor for updates from the listed sources (NVD, OSV, OpenVAS references) for affected products, impact, and fixes.

CVE-2018-1010

Technical details about CVE-2018-1010 are not publicly provided in the supplied documents. The connected MSKB entries relate to OS updates but do not disclose vulnerability specifics. Monitor for updates from Microsoft for any confirmed fixes or advisories.

CVE-2018-8544

CVE-2018-8544 is a remote code execution vulnerability in the Windows VBScript engine that corrupts memory when handling objects in VBScript. It affects multiple Windows versions (e.g., Windows 7, Windows 10, various Server editions) and is triggered by memory manipulation of VBScript objects, al...

CVE-2018-8626

CVE-2018-8626 is a remote code execution vulnerability in Windows DNS servers caused by improper handling of requests, leading to a heap overflow. Affected products include Windows Server variants and Windows 10/Server deployments configured as DNS servers. The root cause centers on the Windows D...

CVE-2019-0570

The CVE-2019-0570 issue is a Windows Runtime Elevation of Privilege vulnerability stemming from improper in-memory handling of objects in Windows Runtime. Affected products listed include Windows 10 (and Windows 10 Servers), Windows 8.1, Windows Server 2012/2012 R2, Windows Server 2016/2019, and ...

CVE-2021-1658

Technical details (affected product/component versions, root cause, impact specifics, and remediation) for CVE-2021-1658 are not provided in the connected documents. Monitor for updates in official advisories and vendor patches.

CVE-2021-31958

Technical details for CVE-2021-31958 are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-33756

CVE-2021-33756 corresponds to a remote code execution flaw in the Windows DNS Snap-in affecting Windows/Windows Server. Public documents identify the affected component as the DNS Snap-in and confirm a high-severity issue (CVSS v3.1 base score 8.8; network vector, no privileges required, user int...

CVE-2021-34441

CVE-2021-34441 refers to a Microsoft Windows Media Foundation Remote Code Execution vulnerability. The connected sources identify it as affecting Windows Media Foundation components, with a CVSS v3.1 base score of 7.8 (HIGH), indicating local attack vector, required user interaction, and impacts ...

CVE-2021-40454

CVE-2021-40454 is an information-disclosure vulnerability in the Rich Text Edit Control used by Microsoft Office. The issue is documented as a local, low-complexity disclosure that can impact confidentiality (CVE-2021-40454) with a MEDIUM overall severity (CVSS v3.1 base score 5.5). The connected...

CVE-2022-26808

Technical details about CVE-2022-26808 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2022-26810

Technical details about CVE-2022-26810 are not provided in the supplied connected documents. No explicit affected products/versions, root cause, or fixes are described here. Monitor for updates from official sources.

CVE-2023-23400

CVE-2023-23400 is a Windows DNS Server remote code execution vulnerability. Public updates address the issue via March 2023 security updates (e.g., KB5023697, KB5023702) and security-only/monthly rollup records (KB5023764/KB5023765). Updates reference DCOM hardening (phase 3 of KB5004442) and rel...

CVE-2024-26200

CVE-2024-26200 is a Windows Routing and Remote Access Service (RRAS) remote code execution vulnerability. Connected sources list RRAS as vulnerable and indicate the impact as executing random code, with CVE-2024-26200 appearing under RRAS in the Microsoft Windows vulnerabilities compilation. The ...

CVE-2025-21341

Technical details for CVE-2025-21341 are not provided in the supplied documents. Public disclosures describe it as Windows Digital Media Elevation of Privilege, but no specifics on vulnerable component, versions, exploit or fix are included. Monitor for updates.

CVE-2026-62781

CVE-2026-62781 is a heap-based buffer overflow in the RPC Runtime Library that enables remote code execution over the network. The vulnerability allows an unauthenticated attacker to run code on affected systems via network interaction. Current documents confirm the issue but do not provide produ...

CVE-2018-0749

CVE-2018-0749 is an elevation-of-privilege issue in the Windows SMB Server (affecting Windows 7 SP1, 8.1, 10 variants, Server 2008/2012/2016, etc.). The root cause centers on how the SMB server and NT Object Manager handle Extended Attributes and process IDs when opening named pipes, which could ...

CVE-2019-1019

CVE-2019-1019 is a Windows security feature bypass in NTLM authentication that allows bypassing validation on NETLOGON messages, enabling an attacker to access a machine with their original user privileges after sending a crafted authentication request. Connected material confirms related exploit...

CVE-2020-1281

CVE-2020-1281 correlates to a Microsoft Windows OLE Remote Code Execution vulnerability. CNVD-2021-22931 describes a flaw where Windows OLE fails to properly validate user input, enabling an attacker to execute arbitrary code via a crafted file or program. The initial description also notes remot...

CVE-2021-26425

CVE-2021-26425 is a Windows Event Tracing elevation-of-privilege vulnerability. Affects Windows Event Tracing component with local, low-privilege attack requirements and high impact on confidentiality/integrity/availability (per CVSS 3.1 vector). The connected sources confirm this CVE within Micr...

CVE-2021-31186

CVE-2021-31186 is a Windows RDP information disclosure vulnerability. The provided connected documents identify the CVE as part of broader Microsoft Windows vulnerability assessments (e.g., OpenVAS/Nessus plugins) and list it among CVEs in KB updates and advisories. The core details in the materi...

CVE-2021-34444

Technical details about CVE-2021-34444 (Windows DNS Server DoS) are not publicly available in the provided documents; no affected product/version or exploitation information is disclosed here. Monitor for updates.

CVE-2021-38667

CVE-2021-38667 is a Windows Print Spooler Elevation of Privilege vulnerability. The NVD entry identifies it as a local, low-attack-complexity flaw that yields partial confidentiality, partial integrity, and partial availability impact, with a CVSS v3.1 base score of 7.8 (HIGH) and a local attacke...

CVE-2022-26818

Technical details for CVE-2022-26818 are not publicly provided in the supplied documents. No concrete affected product versions, root cause, or fixes are specified here. Monitor for updates from official advisories and referenced CVE records.

CVE-2022-29151

CVE-2022-29151 is a Windows CSV (Cluster Shared Volume) Elevation of Privilege vulnerability. The NVD entry and MSRC reference describe it as a local-privilege issue in CSV with high impact (confidentiality, integrity, and availability all affected). CVSSv3.1 shows a base score of 7.0, attack vec...

CVE-2022-30149

Technical details for CVE-2022-30149 (affected component/versions, exploit specifics, and remediation) are not present in the provided connected documents. Monitor for official updates and new public disclosures.

CVE-2022-33635

CVE-2022-33635 is tied to the Windows Graphics Component (GDI+) with a vulnerability that could allow an attacker to execute arbitrary code. The CVSSv3 vector indicates a High-severity issue (7.8) with a Local attack vector and required user interaction, meaning an attacker would need a logged-in...

CVE-2022-41058

Technical details for CVE-2022-41058 are not provided in the supplied documents. No affected products or fixes are described here. Monitor for updates in public advisories and the referenced sources.

CVE-2023-21750

CVE-2023-21750 is a Windows Kernel EoP issue tied to registry virtualization: a logic bug in CmKeyBodyRemapToVirtual allowed deleting HKLM\Software keys using only KEY_READ and KEY_SET_VALUE rights, bypassing expected DELETE checks. This is a local, privilege-escalation vulnerability within the r...

CVE-2018-0744

CVE-2018-0744 is a Windows kernel elevation-of-privilege vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (various builds up to 1709), and Windows Server 2016/1709. The issue arises from how the kernel handles objects in memory, enabling local privilege escalation. E...

CVE-2019-0555

The CVE-2019-0555 entry corresponds to an elevation of privilege in Microsoft XmlDocument that can escape AppContainer sandbox via cross-boundary remoting. Connected analysis explains an IDispatch/type library abuse path: malicious clients query for the old IXMLDOMDocument interface, then marshal...

CVE-2021-33750

CVE-2021-33750 is a Windows DNS Snap-in Remote Code Execution vulnerability affecting Windows/Windows Server DNS snap-in. The CNVD/NVD entries describe a remote code execution flaw in the DNS snap-in component that could enable an attacker to compromise affected systems. NVD CVSSv3.1/MB: 8.8 (NET...

CVE-2022-22029

CVE-2022-22029 is a Windows Network File System Remote Code Execution vulnerability. Public details in the connected docs show a root cause in NFS 4.1 COMPOUND REQUEST handling: nfssvr.sys miscalculates a per-operation size during reply construction, causing a buffer/size mismatch that can enable...

CVE-2023-21682

Technical details about CVE-2023-21682 are not publicly disclosed in the provided connected documents. The materials only reference a Windows PPP information disclosure vulnerability with CVSSv3.1 base score 5.3. Monitor for updates.

CVE-2023-21767

Technical details for CVE-2023-21767 are not provided in the Connected documents or initial description. No affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from official sources.

CVE-2023-24859

CVE-2023-24859 is a Windows vulnerability described as a denial-of-service issue in the Windows Internet Key Exchange (IKE) extension. The available data identifies the affected component as the IKE extension and notes impact as availability degradation (DoS) with network attack vector and no use...

CVE-2023-28307

Technical details for CVE-2023-28307 are not publicly provided in the supplied documents. No affected products, root cause, or remediation specifics are included here. Monitor for updated connected documents for concrete information.

CVE-2024-26252

CVE-2024-26252 refers to a Windows kernel vulnerability in the rndismp6.sys driver that enables remote code execution. The issue is described as affecting the Windows component rndismp6.sys with a CVSSv3.1 base score of 6.8 (Medium), and usability concerns indicate a physical attack vector, low a...

CVE-2017-0283

CVE-2017-0283 is described in the connected MSKB as a remote code execution vulnerability in Microsoft Office components that could be triggered by opening a specially crafted Office file. The MSKB describes a security update KB3191937 for Skype for Business 2015 (Lync 2013) that addresses CVE-20...

CVE-2018-8210

Technical details such as affected product versions, root cause, exploitability, and patch guidance are not provided in the connected documents; monitor for updates.

CVE-2019-0943

CVE-2019-0943: Windows ALPC handling flaw leads to local privilege escalation. Root cause: improper handling of ALPC calls allowing a logged-on attacker to run code in the system’s security context. Impact per sources: potential full control, data changes/deletion, new accounts with full rights. ...

CVE-2020-1492

CVE-2020-1492 – Windows Media Foundation memory corruption : A memory handling flaw in Windows Media Foundation can lead to memory corruption when objects are processed in memory. An attacker who exploits this could install programs, view/modify/delete data, or create new accounts with full right...

CVE-2020-1577

CVE-2020-1577 affects DirectWrite. The connected documents confirm an information-disclosure flaw where DirectWrite may reveal memory contents; exploitation could be achieved by convincing a user to open a crafted document or visit an untrusted page. The Microsoft advisory notes the fix is to cor...

CVE-2021-34533

CVE-2021-34533 is a Windows Graphics Component Font Parsing Remote Code Execution Vulnerability. Affected software is the Windows Graphics Component; the issue arises from font parsing logic, enabling code execution on the target system. The CVSS data indicates a HIGH impact with potential local ...